<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@SimSun";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=FR link=blue vlink=purple>
<div class=WordSection1>
<p class=MsoNormal><span lang=EN-US>Hello,<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>We are engineers of the Orange Labs, and now
we are doing some test for the ikev2 in the Strongswan environment, we aim to
configure the ipsec like:<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>DH = 1536-bit MODP Group<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>PRF = PRF_HMAC_SHA1<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>ID = ID_KEY_ID<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>AUTH = RSA Digital Signature<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>ESP_ENCR = ENCR_AES_CBC or NULL<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>ESP_AUTH = AUTH_HMAC_SHA1_96 or NULL<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>We now arrived to configure the ipsec.conf
with these parameters like:<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>-- conn <><o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>
auth = esp<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>
authby = rsasig<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>
ike = modp1536<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>
keyexchange = ikev2<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>
esp = aes128|aes192|aes256|null (for encryption)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>
esp = sha1|sha (for authentication )<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>But we still have some problem following:<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>1, for the ESP_ENCRE and the ESP_AUTH, how
can we put the both values “aes128”(for ESP_ENCRE) and the
“sha1”(for ESP_AUTH) to the single “esp” parameter in
the ipsec.conf?<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>2, we didn’t find the right
parameters for the “PRF” and the “ID”, so do you have
any idea that how we can configure these parameters? Or is there any document
where we can find out some complete description of the configuration? <o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Thank you <o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Orange Labs<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Equip MAPS/STT<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
</div>
</body>
</html>